commit | 56beb29852101f342c12f355bf89639a107336cc | [log] [tgz] |
---|---|---|
author | Sungjoon Park <sungjoon.park@broadcom.corp-partner.google.com> | Mon Dec 12 16:03:02 2022 +0900 |
committer | Paul Chen <chenpaul@google.com> | Tue Dec 20 03:26:30 2022 +0000 |
tree | 78460d634cc85d4485b27cbe808920e276629b18 | |
parent | 31b7bb4d289272bdcde29b8e37cc2a5c2d5e2760 [diff] |
bcmdhd: Fixed Memory Overwrite in function dhd_prot_ioctcmplt_process In dhd_prot_ioctcmplt_process of dhd_msgbuf.c, there is a possible out of bounds write due to improper input validation Fix: 1. Added bounds check 2. Limited the copy length to dest length. Bug: 254028518 Test: BRCM Internal test is finished without regression. Change-Id: I7d000282c6732ff0963751284ac6331c7cc48d8b Signed-off-by: Sungjoon Park <sungjoon.park@broadcom.corp-partner.google.com>